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ASSURED PRINTING OF DOCUMENTS OF VALUE 

Field Of The Invention 

The present invention relates generally to secure document printing. In particular, the 
1 0 present invention relates to a method and apparatus for establishing that a document 

represented by a computer file that was sent via a data network, was paid for and successfully 
printed from a remote printing device. 

Related Applications 

1 5 The present application is related to patent applications concurrently filed herewith, the 

respective teachings of which are incorporated by reference. These related applications are 
U.S. Patent Application Docket Nos. 10001062 by Currans et al., titled "Method and 
Apparatus For Insuring Output Print Quality" (hereinafter "Guaranteed Print"), and 10001686 
by Currans, entitled "Serialized Original Print" (hereinafter "Serialized Print"). As of the filing 

20 date of this application and these related applications, all rights, title and interests are 
commonly owned by the Hewlett Packard Company. 

Background Of The Invention 

The Internet, and in particular the World Wide Web, has enabled the instantaneous 
25 transfer of electronic files between computers that might be located anywhere in the world so 
long as the computers are coupled to the Internet. Because these files routinely represent 
documents, photographs, or perhaps bank account, credit card account numbers, all of which 
have economic value, the speed at which intellectual property and money can be transferred is 
now nearly instantaneous. 
30 While the ease and speed with which documents and value can be transferred can be a 

boon to business it can also be a liability when the distribution of an electronic file needs to be 
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controlled. By way of example, if a valuable work of art such as a photograph, is digitized (i.e. 
converted into an electronic file), uncontrolled reproduction and distribution of the electronic 
file that represents the art work will eventually render the work valueless. Electronically 
transferring files that have any sort of economic value is problematic because of the likelihood 
5 that economic value will be taken by those who are unscrupulous. 

With the advent of electronic commerce, and the accompanying worldwide distribution 
of documents and other valuable information, a way of discerning that a document has been 
delivered to, and printed by, an intended recipient might prevent or reduce instances of fraud 
enabled by the ease with which electronic files can be reproduced and distributed. 

10 

Summary Of The Invention 

The present invention provides a method and apparatus for controlling printing of a 
document delivered via a computer network. A first portion of a document is encrypted using 
at least a first encryption key, thereby creating a partially encrypted file. The partially 
1 5 encrypted file is transmitted via the computer network. A second portion of the transmitted 
partially encrypted file is printed and a t least a serialized print number is returned. In 
response, the first encryption key is received. The first portion of the partially encrypted file is 
then decrypted and printed. 



20 Brief Description Of The Drawings 

Figure 1 is a simplified block diagram of a computer network including a sender's 
computer and a document recipient's computer and printer. 

Figures 2-1 through 2-13 show a data flow diagram or transaction timeline 
representation of the commands and signals exchanged between the various computers, 
25 software and printers that implement the claimed process. 



Detailed Description Of The Preferred Embodiments 

Briefly stated, the present invention provides a method and apparatus for verifying that 
a document was printed from an electronic file that was transmitted to and printed from a 
30 remote print mechanism. The exemplary method disclosed herein enables a document or file 
distributor to control re- distribution by conclusively determining whether a document printed 
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from a file was printed in whole or in part. In a preferred embodiment, the process includes the 
steps of encrypting a document and/or parts thereof that is to be transferred electronically, 
transmitting the encrypted document to an intended party via a data network, such as the 
Internet, partially decrypting the document using a first decryption key so as to enable the 
5 document to be verified that it was properly received, and printing part of the document up to a 
point at which a second decryption key is required. 

If the document is successfully printed down to the point where a second encryption 
key is required, the recipient of the document returns to the sender, an indicia, such a serial 
number of the document, which has been physically printed on the document at the time, that 

10 the document had started to print successfully. Receipt of the partial-printing proof by the 
document sender triggers the transmission to the document recipient (i.e., the printer and not 
the user's browser), the second decryption key by which the remaining portion of the document 
can be decrypted and printed by the recipient (i.e., the printer and not the user's browser). 
Receipt of the indicia that the document was at least partially printed is created by the 

1 5 recipient's printer or print mechanism using a method disclosed and claimed in "Serialized 
Print". 

Upon the document sender's receipt of the indicia that the document was at least 
partially printed, the document recipient will thereby have provided to the document sender, 
conclusive proof that the entire document was received successfully. By using the 

20 "Guaranteed Print" technology, the accuracy of the document that was printed can be 

determined and a numerical indicia of output print quality generated such that a document 
sender provided with the print quality indicia can know whether the document that was printed 
was in fact a reasonably facsimile of the document that was electronically sent. Using the 
indicia of printing that was received by the sender, as well as an objective indicia of the output 

25 print quality documents that are sent electronically but which do not reasonable resemble their 
original condition as sent by the sender can be selectively retransmitted by the document 
sender at the document sender's discretion. 

Figure 1 shows a simplified block diagram of a registered printing system 100 by which 
computer files are electronically transferred over a network, to be printed at a remote device. 

30 The system 100 is comprised of a network, such as the Internet, which is a data network 102 
comprised of a number of computers 104 intercoupled to each other via appropriate media 106 
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and switching systems (not shown). An explanation of computer networks is beyond the scope 
of this disclosure and not necessary for an appreciation of the invention disclosed herein. It is 
sufficient to state that electronic files are transferred between computers over the network. In 
addition to the Internet, other data transfer mechanisms such as Ethernet networks, local area 
5 networks, wide area networks or direct dial-up connections using one or modems (not shown) 
could be used to accomplish file transfers. The transferred files might represent a variety of 
documents, such as works of art, photographs, negotiable instruments, vouchers or other means 
of sending or receiving documents having economic value to either the sender or recipient. 
When such documents are printed, they typically have or represent economic value to the 

10 sender, the recipient, or a third party. 

Document transfers between document senders and receivers are enabled by way of a 
network like the Internet but as set forth above, such transfers also might be accomplished 
using a local area network, a wide area network, an Ethernet network as well as the plain old 
telephone system sometimes referred to as the public switched telephone network. In instances 

1 5 where the data network 1 02 is the World Wide Web of the Internet, a web browser program 
executing on a subscribers computer 108 provides access to "web sites" that are embodied by 
other computers 104 coupled to the web, including the computer(s) of a document provider, 
identified in Figure 1 by reference numeral 110. 

By way of example, a subscriber's computer 108 might request the computer of a 

20 content provider 1 10 to transfer to it, some sort of electronic file 1 12, embodying a document 
that might include a work of art, a memorandum, or perhaps a negotiable instrument or airline 
tickets for example. Upon being printed, such a document has economic value to either the 
sender (not shown) or the recipient of the document (not shown). 

Using the Internet 102, an intended recipient of a document, considered herein to be a 

25 document requestor, can request from a sender's computer 110, the transmission of a file 1 1 2 
from the sender's computer 1 10 via the Internet 102 to the recipient's computer 108. If the 
recipient's computer 108 has the requisite application program by which the transmitted file 
112 can be opened and printed, printing the document 114 that was embodied as an electronic 
file 1 12 is readily accomplished using an appropriate printer 116 coupled to the recipient's 

30 computer 108. 
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In the preferred embodiment of this invention, the recipient's computer 108 and the 
printer 1 16 are equipped with, and capable of using, the method and apparatus disclosed in 
"Serialized Print." As such, the printer 1 16 is a printer that is capable of generating serialized 
output as described in "Serialized Print". The disclosure and teachings of the "Serialized 
5 Print," by which the generation of serialized output is taught, is incorporated herein by 

reference. Using that novel method for generating serialized printed output, the printer 1 16 
generates a unique serial number, bar code or encoded data (hereafter, serial number) for the 
document 1 14 in the course of printing the file 112. The serial number generated by the printer 
1 16 is of paramount importance in verifying to a document sender that the file 1 12 was 
1 0 received at the computer 1 08 and at least partially printed. 

Figures 2-1 through 2-13 shows a data flow diagram depicting the steps of the method 
described herein. 

In Figure 2-1, as an initial matter, the software capability to guarantee output print 
quality and to produce a serialized original print needs to be installed on the recipient's 

15 computer 108 as well as on the sender's computer 1 10 as depicted in step no. 202. Assuming 
that such software capabilities have been installed on the respective first and second computers, 
the recipient's (i.e. second) computer 108 will request from the printer 1 16 an encryption key 
for public distribution (i.e. a public encryption key) in the format of an X.509 certificate, which 
might be embodied as a serial number, a model number or combination thereof obtained from 

20 the printer in step no. 204 in Figure 2- 1 . 

In Figure 2-2, when the printer returns an X.509 certificate and data as that identifies 
the capabilities of the printer (For example, is the printer capable of practicing the "Guaranteed 
Print " technology) at step 206, the user's computer installs the public key on a browser plug-in 
file, known to those skilled in the art. 

25 Information about the X.509 standard is available from a variety of sources, including 

the National Institute of Standards and Technology web site, the URL of which is: 
http://csrc.ncsl.nist.gov/ . An X.509 certificate serves as an electronic credential over the 
Internet for individuals and computer services (Web sites). X.509 certificates are used in the 
same way as birth certificates, passports or drivers' licenses to validate the identity of 

30 individuals for Web site access, communication and electronic commerce. 
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An individual wishing to send an encrypted message applies for a digital certificate 
from a Certificate Authority (CA). The CA issues an encrypted digital certificate containing 
the applicant's public key and a variety of other identification information. The CA makes its 
own public key readily available through print publicity or perhaps on the Internet. 
5 The recipient of an encrypted message uses the CA's public key to decode the digital 

certificate attached to the message, verifies it as issued by the CA and then obtains the sender's 
public key and identification information held within the certificate. With this information, the 
recipient can send an encrypted reply. The most widely used standard for digital certificates is 
X.509 which is the technology used by this merchant. 

1 0 The X.509 is currently believed to be the most widely used standard for defining digital 

certificates. The X.509 standard for digital certificates binds the identity of a person or 
organization to an electronic identification key. The digital certificate contains information 
about its owner, its issuer, issue and expiration date stamps, and information for verifying the 
integrity of the certificate that can be used for digital IDs, digital signatures and electronic 

15 fingerprints. 

By executing an HTTP (hypertext transfer protocol) "GET" command, the user's web 
browser (e.g. Internet Explorer™ or Netscape™) running on the user's computer (i.e. the 
second computer) requests verification of the printer's public key from a security key issuer, 
which then posts the answer of authenticity of the printer's public key using a "PUT" in step 

20 207. In Figure 2-3, in step 208, a "certificate" from a printer capable of practicing the 

"Guaranteed Print" technology is decrypted and the printer's public key is installed (or copied) 
into the document purchaser's web browser. A decision to buy a document is formatted and 
sent to the vendor 210 conveying the capabilities of the printer, i.e. that the printer is 
"Guaranteed Print" technology capable. 

25 In Figure 2-4, the document vendor's computer's response 212 is to transmit a file 

(identified in Figure 1 by reference numeral 1 12) at least part of which is encrypted at least 
once using a so called public key of the vendor's computer (identified in Figure 1 by reference 
numeral 110) and preferably also encrypted using a uniform resource locator (URL) address to 
which credit or payment information is to be sent by the buyer. 
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In an alternate embodiment, only part of a document is encrypted prior to transmission 
and using only one key. By encrypting only part of a document (i.e. up to a predetermined 
point) prior to transmission, at least the unencrypted portion of the document can be printed at 
the destination, without a decryption key, thereby establishing recognition-of-value by the 
5 purchaser before transferring funds. In such an embodiment, a decryption key eventually 
needs to be provided. By holding back the decryption key pending receipt of payment - and 
perhaps ascertaining proof that at least part of the document was satisfactorily printed using for 
example the "Guaranteed Print" teachings - a document vendor can protect its interest in the 
document by withholding the key until payment has been received by an entity associated with 

10 the document, for example, the vendor or a credit agency for the vender. 

In step 214, the document buyer's computer (i.e. the second computer 108) optionally 
retrieves the URL of a credit agency and performs a secure hypertext transfer protocol transfer 
providing payment information to a financial organization or other credit provider effectuating 
the transfer of funds for the payment of the file from the vendor. A credit approval transfer 

15 form 216 is optionally returned to the buyer and enables the buyer to populate the form with 
pertinent credit information by which the credit provider can make payment to the vendor in 
step 218, shown in Figure 2-5. If the credit transaction is validated by the credit provider as set 
forth in step 220, the transaction can be memorialized by the buyer's computer and thereafter 
forwarded to the vendor in step 222, shown in Figure 2-6. 

20 The document vendor can electronically verify with a credit provider, e.g. 

www.cybercash.com , in step 224 that the document purchaser has funded, or can otherwise pay 
for the transaction and, in response thereto, the credit provider can provide an appropriate 
acknowledgement 226 to the vendor, as shown in Figure 2-7. Upon verification that payment 
will be received by the document vendor, the vendor optionally encrypts the information 

25 content of interest, using the document vendor's private key and a second key (also known as a 
session key) and sends the doubly encrypted file to the purchaser in step 228. (Public key/ 
private key encryption and decryption mechanisms are well known. Disclosure or 
understanding of that technology is not germane to the invention disclosed herein. Alternate 
embodiments of the invention include singly encrypting the file using a single encryption key, 

30 which as an example could be the document vendor's private key, a purchaser's public key or 



10001687 

8 

some other encryption key by which the document could be secured against theft in transit 
across a data network or by the document recipient.) 

In Figure 2-8, using his own private decryption key, the purchaser decrypts the file and 
verifies that the received file is intact and sends the file to the printer 1 1 6 for printing in step 
5 230. The printer begins printing the file and in the process generates an original serialized 
print number in accordance with the "Serialized Print" methodology, in step 232. The serial 
number generated by the printer will be printed and also sent to the browser of the purchaser's 
computer in step 234, shown in Figure 2-9. The browser also records the serial number of the 
print job in progress for subsequent use. 

10 As the printer 116 continues following the instructions from the computer 108 to 

generate output, eventually the printer 1 16 or the computer 108 encounters information in the 
file 112 that is encrypted with the vendor's second key. Upon determining that further printing 
will be inhibited absent the other decryption key, the printer, using the "Serialized Print" 
methodology, requests the second key in step 236 from the user's computer, Figure 2-9. In 

15 step 238, Figure 2-10 the user's browser transmits a request for the second key to the printer or 
in this case the vendor's computer 110 and as proof that the job has been at least partially 
printed includes the serialized print number generated by the printer in step 232. 

Upon receipt of the original serial print number generated in step 232 by the vendor's 
computer 1 10 in step 238, the vendor can assume that at least part of the document file 1 12 was 

20 printed from the printer 116 and was fully and successfully received by the computer 108. The 
' vendor can record the serialized print number in a database for billing purposes or for billing 
credit purposes. 

The vendor can also optionally submit the transaction complete signal in step 240, 
Figure 21 1, to the credit provider as a means for justifying the receipt of payment from the 
25 credit provider. Upon receipt that at least part of the document has been printed, the credit 
provider can debit the purchasers account and credit the vendor's account accordingly. 

In order to complete the printing job, the vendor's computer 110 needs to return to the 
purchaser's computer 108, the second decryption key in step 242 or a session key, that the 
printer can use for decrypting the content The second key is encrypted so only the printer can 
30 decrypt it. This is generally done using the printer's public key and the vendor's private key. 
Upon receipt of the second key, the browser running on the purchaser's computer 108 passes 
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the second encryption key to the printer in step 244, which enables the printer to decrypt the 
key and finish the print job it started in step 230 by decrypting the document and printing it. In 
step 246, the printer sends status information back to the browser of the purchaser's computer 
108 informing the purchaser's computer 108 and possibly the browser of whether or not the 
5 entire print job was successful. 

By using the methodology disclosed in the inventor's "Guaranteed Print" technology, 
the printer 116 can provide an objective measurement of the output print quality. A printer 
employing the "Guaranteed Print" technology is referred to herein as a printer that is capable of 
guaranteeing output print quality. 

10 Using the "Guaranteed Print" technology, the printer 116 depicted in Figure 1 can, in 

real time, compare what was printed to what was sent 112 and determine whether or not the 
purchaser got what he or she bargained for. Using that technology it is possible to create a 
numeric index of the relative output quality of a print job from a printer. 

If output print quality was determined to be unsatisfactory or failed altogether, the 

15 printer 116 can send an appropriate error message to the vendor or the vendor's computer 110 
informing the vendor that the output print quality was defective. In the event that an output 
print job did not successfully complete in its entirety, or was otherwise disturbed or defective, 
the vendor can impede retransmission of the file 1 12 until it physically receives all of the 
output that was printed by the printer 116. 

20 By way of data recovered using the method and apparatus for insuring output print 

quality, the vendor knows precisely how much of the document file 112 was actually printed 
1 14 and refuse to provide another copy of the document until physical receipt of the output 
print material is received in hand that has the serial number, bar code or encoded data in step 
234. 

25 Public and private encryption key technologies are well known to those skilled in the 

art. Alternative embodiments of the invention would include using proprietary keys of both the 
purchaser and the vendor. By using a publicly available key however, it is possible for the 
document sender to encrypt a file with a public key enables the document recipient to decrypt it 
using his private key. Commercially available public/private encryption software is readily 

30 available. 
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It should be apparent that by using the methodologies disclosed herein, that valuable 
documents can be transferred via data networks with some sense of security and with some 
sense that unauthorized reproduction of a document will be impeded. Similarly, valuable 
content for which value was received need not be retransmitted absent proof by the sender that 
the intended output was not successfully realized. 
We claim: 
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CLAIMS 

1 . A method to control printing of a document file delivered via a computer network 
comprising the steps of: 

at a first computer: 

5 encrypting at least a first portion of a document file using at least a first 

encryption key thereby creating a partially encrypted file; 

transmitting the partially encrypted file to a second computer via said computer 
network; 

at said second computer: 
10 printing at least a second portion of said partially encrypted file using a 

serialized print methodology; 

returning to said first computer at least a serialized print number, and receiving, 
in response thereto, said first encryption key; 

decrypting said first portion of said partially encrypted file to create a decrypted 
15 document file; and 

printing said decrypted document file. 

2. A method in accordance with the method of claim 1 wherein said step of returning 
further comprises the step of providing payment. 

20 3. A method in accordance with the method of claim 1 further including steps of: 

before transmitting the partially encrypted file to a second computer, encrypting at least 
part of said partially encrypted file to form a twice-encrypted file using a second encryption 
key; and 

prior to printing at least a second portion of said partially decrypted file, decrypting said 
25 twice-encrypted file using at least one of either said second encryption key or a third 
encryption key. 

4. A method in accordance with the method of claim 1 wherein said serialized print 
methodology includes the steps of: 
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generating by a device printing said decrypted document file, a number correlating said 
decrypted document file to said printing device; 

returning said number to said first computer thereby enabling said second computer to 
receive said first key. 

5 5. A method in accordance with the method of claim 1 further including the step of 
printing at least a portion of said partially decrypted document file using a guaranteed print 
methodology. 

6. A system for controlling the printing of a document file delivered via a computer 
network comprising: 

10 a first computer that encrypts at least a first portion of a document file using a first key; 

a data transfer device coupled said first computer capable of transferring the partially 
encrypted document file to a second computer; 

a print mechanism operatively coupled to said data transfer device, said print 
mechanism capable of receiving said document file and decrypting at least a portion of said 
1 5 first portion of said document file and printing said first portion using a serialized print 
methodology. 

7. The system of claim 6 wherein said print mechanism is comprised of a computer 
operatively coupled to a printer. 

8. The system of claim 6 wherein said print mechanism is comprised of a printer capable 
20 of generating serialized output. 

9. The system of claim 6 wherein said print mechanism is comprised of a printer capable 
of guaranteeing output print quality. 

10. Apparatus for controlling the printing of a document file delivered via a computer 
network, comprising: 
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a first computer coupled to a data transfer mechanism, said first computer capable of 
receiving via said data transfer mechanism, at least one partially encrypted document file from 
a second computer; 

a print mechanism operatively coupled to said first computer, said print mechanism 
5 being capable printing at least a portion of said partially encrypted document file using a 
serialized print methodology. 

1 1 . Apparatus for controlling the printing of a document file delivered via a computer 
network comprising: 

a first computer coupled to a data transfer mechanism, said first computer capable of 
10 receiving via said data transfer mechanism, at least one partially encrypted document file from 
a second computer; and 

a print mechanism operatively coupled to said first computer, said print mechanism 
being capable printing at least a portion of said partially encrypted document file using a 
guaranteed print methodology. 

15 

12. A method of controlling the printing of a document delivered via a computer network 
comprising the steps of: 

printing a first portion of the document, said first portion being unencrypted; 
communicating, via the computer network, with an entity associated with the document 
20 to arrange for the printing of a remaining portion of the document 

receiving, as a result of said communicating step, an encrypted remaining portion of the 
document; 

decrypting said remaining portion; and 
printing said decrypted remaining portion. 

25 

13. A method in accordance with the method of claim 12 wherein said communicating step 
further comprises the step of providing payment to said entity. 

14. A method in accordance with the method of claim 12 wherein said communicating step 
30 further comprises the step of ascertaining quality of said printed first portion. 
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15. A method in accordance with the method of claim 12 further comprises the step of 
generating a number correlating said document to a printing device printing said first portion. 

5 16. A method in accordance with the method of claim 1 5 wherein said step of 
communicating further comprises the step of communicating said generated number. 

17. A method of controlling the printing of a document delivered via a computer network 
to a user, comprising of the steps of: 

1 0 encrypting a portion of the document; 

transmitting an unencrypted portion of the document via the computer network to the 
user for printing; 

receiving a communication related to a reception of said unencrypted portion by the 
user; and 

1 5 transmitting said encrypted portion of the document to the user via the computer 

network in response to said receiving step. 

18. A method in accordance with the method of claim 17 wherein said receiving step 
further comprises the step of receiving a payment for the document. 

20 

19. A method in accordance with the method of claim 17 wherein said receiving step 
further comprises the step of receiving a proof that said unencrypted portion of the document 
was satisfactorily printed 

25 20. A method of controlling the printing of a partially encrypted document file delivered 
via a computer network, at least a first portion of which partially encrypted document is 
encrypted using at least a first encryption key, comprising the steps of: 

printing at least a second portion of the partially encrypted document file; 
creating a serialized print number and returning the serialized print number via the 
30 computer network; 

receiving the first encryption key; 
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decrypting the first portion to create a decrypted document file; and 
printing said decrypted document file 

21. A method in accordance with the method of claim 20 further comprising the step of 
5 providing payment for the partially encrypted document. 

22. A method in accordance with the method of claim 20 wherein at least part of the 
partially encrypted document file is further encrypted to form a twice-encrypted file using a 
second encryption key, further comprising the step of prior to printing at least a second portion 

1 0 of said partially decrypted document file, decrypting said twice-encrypted file using at least 
said second encryption key. 

23 . A method in accordance with the method of claim 2 1 wherein said step of creating a 
serialized print number further comprises the step of generating, by a device printing said 

1 5 decrypted document file, a number correlating said decrypted document file to said printing 
device. 



20 
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ASSURED PRINTING OF DOCUMENTS OF VALUE 
ABSTRACT OF THE DISCLOSURE 

5 The transmission and reproduction of an original document transferred via a data 

network can be assured when the printing mechanism generates a unique serial number for the 
document being printed. The sender of the document is assured that the intended recipient 
received the document, paid for it, and was able to print it by receipt of the unique serial 
number and a request for an encryption key by which certain information in the document was 
1 0 encrypted. 
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Number and was amended on (if applicable). 
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disclose all information which is material to patentability as defined in 37 CFR 1 .56. 
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